🔒 spider88 Privacy Policy

1Data Controller Information

spider88, operating the Platform accessible at spider88.win, acts as the data controller in respect of personal data collected through the Platform. As data controller, spider88 determines the purposes and means by which personal data is processed. spider88 is committed to processing personal data in accordance with applicable data protection legislation, including but not limited to the Personal Data Protection Act 2010 (PDPA) of Malaysia, where applicable to its Malaysian Members and visitors.

All references to "spider88", "we", "us" or "our" in this Privacy Policy refer to the data controller operating the spider88 Platform. All references to "you", "your" or "Member" refer to any individual whose personal data is processed by spider88, including registered account holders, prospective members and general website visitors.

2Personal Data We Collect

spider88 collects the following categories of personal data, depending on your interaction with the Platform:

spider88 does not intentionally collect special category data (such as health information, racial or ethnic origin, religious beliefs or political opinions) as part of its standard operations. If such data is incidentally provided to spider88 — for example, as part of a responsible gaming assessment — it will be treated with the highest level of confidentiality and processed only to the extent strictly necessary.

3How We Collect Your Data

spider88 collects personal data through the following means:

3.1 Direct Collection

Data you provide directly when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions. This includes information entered into any form field on the spider88 Platform.

3.2 Automated Collection

Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs and similar tracking technologies. This data is collected regardless of whether you are a registered Member or an anonymous visitor.

3.3 Third-Party Sources

spider88 may receive data from third-party identity verification providers, payment processors, fraud prevention services and analytics providers in the course of operating the Platform. Data received from third parties is handled in accordance with this Privacy Policy and the terms under which it was provided to spider88.

4Purposes and Legal Basis for Processing

spider88 processes your personal data for the following purposes:

• Account Registration and Management: To create, maintain and administer your spider88 account, including verifying your identity and age (21+ requirement) and managing your account preferences.
• Service Delivery: To provide sports betting, live casino and slot gaming services, process deposits and withdrawals, and credit bonuses and promotional rewards to your account.
• Legal and Regulatory Compliance: To comply with applicable laws including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, responsible gaming regulations and data protection legislation. Processing for this purpose is mandatory and cannot be declined by Members.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent activity, money laundering, collusion and other prohibited conduct on the Platform. Spider88 has a legitimate interest in maintaining the security and integrity of its Platform and protecting all Members.
• Customer Support: To respond to your queries, complaints and requests submitted through live chat, email or other support channels.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion and cooling-off periods.
• Marketing Communications: To send you promotional offers, bonus notifications and event updates relevant to spider88 services, where you have consented to receive such communications. You may withdraw consent at any time via your account communication preferences.
• Platform Improvement: To analyse usage patterns and technical performance in order to improve the spider88 Platform, fix bugs and develop new features.

5Cookies and Tracking Technologies

The spider88 Platform uses cookies and similar tracking technologies to enhance user experience and collect usage data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, maintain security tokens and remember your account state across pages. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your language preference, game settings and account display preferences.
• Analytics Cookies: Collect anonymised data about how visitors interact with the Platform — pages visited, session duration, error events — to help spider88 improve the user experience.
• Session Integrity Cookies: Used to detect and prevent fraudulent sessions, automated bot activity and multiple simultaneous sessions from the same account on different devices.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your spider88 account. Continued use of the Platform after being presented with this cookie information constitutes acceptance of the use of necessary cookies.

6Disclosure of Personal Data to Third Parties

spider88 does not sell your personal data to third parties. spider88 may share your personal data with the following categories of recipients, strictly as necessary to fulfil the purposes described in Section 4:

• Payment Processors: Financial institutions and e-wallet operators (including Touch 'n Go, DuitNow, FPX and connected Malaysian banks) for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance services engaged to verify member identities and screen against regulatory watchlists.
• Game Software Providers: Certified game providers whose software is integrated into the spider88 Platform. These providers may receive technical session data necessary to operate their games and verify the integrity of game outcomes.
• Regulatory and Law Enforcement Authorities: spider88 may disclose personal data to competent authorities where required by law, court order or regulatory direction. Such disclosures are made without prior notice to the Member where required by the applicable legal obligation.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity and platform infrastructure providers engaged by spider88 under contractual data processing agreements that prohibit independent use of Member data.

All third parties with whom spider88 shares personal data are required to process such data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

7International Data Transfers

spider88 may process or store personal data on servers located outside Malaysia. Where such transfers occur, spider88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under applicable Malaysian data protection law. These safeguards may include contractual data processing clauses, certification frameworks or equivalent mechanisms recognised under applicable law.

By using the spider88 Platform, you acknowledge that your personal data may be transferred internationally as described above. If you have concerns about international data transfers relating to your spider88 account, please contact us using the details in Section 13.

8Data Retention

spider88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as necessary to resolve disputes and enforce agreements. General retention principles applied by spider88 include:

• Account data and gaming activity records are retained for a minimum of five (5) years from the date of account closure or last activity, in accordance with AML and regulatory record-keeping obligations.
• Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Customer support communications are retained for a minimum of two (2) years from the date of the interaction.
• Technical and usage data collected via cookies and logs is retained for a period of up to thirteen (13) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with spider88's data lifecycle management procedures.

9Security Measures

spider88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration and disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and the spider88 Platform.
• Encrypted storage of account credentials — passwords are never stored in plain text.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented need-to-know.
• Regular security assessments, penetration testing and vulnerability scanning of the Platform infrastructure.
• Multi-factor authentication available to all Members and applied internally for staff accessing sensitive systems.
• Incident response procedures providing for prompt containment and notification in the event of a personal data breach.

While spider88 takes all reasonable steps to protect your data, no internet transmission or digital storage system is entirely immune to risk. Members are encouraged to take personal responsibility for securing their own login credentials and devices.

10Your Rights as a Data Subject

Subject to applicable law, you have the following rights in respect of the personal data spider88 holds about you:

• Right of Access: You may request a copy of the personal data spider88 holds about you, together with information about how it is processed.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that spider88 delete your personal data. Note that this right is subject to legal retention obligations — spider88 may be required to retain certain data even following an erasure request.
• Right to Restrict Processing: You may request that spider88 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that spider88 provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a request to spider88 using the contact details in Section 13. spider88 will respond to data rights requests within the timeframe required by applicable law, typically within 30 days of receipt.

11Children and Minors

The spider88 Platform is strictly intended for adults aged 21 years and above. spider88 does not knowingly collect personal data from individuals below the age of 21. If spider88 becomes aware that personal data has been collected from a minor, such data will be deleted immediately and the associated account will be permanently closed. Any winnings or funds associated with an account held by a minor will be forfeited.

If you believe that a minor has registered an account with spider88 or provided personal data to the Platform without authorisation, please contact spider88 support immediately using the details in Section 13.

12Changes to This Privacy Policy

spider88 may update this Privacy Policy from time to time to reflect changes in applicable law, data processing practices or Platform functionality. Where changes are material, spider88 will provide notice to registered Members via email to their registered address or via a prominent notification on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. Continued use of the spider88 Platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure.

13Contact and Data Enquiries

For any questions, concerns or requests relating to this Privacy Policy or to the personal data spider88 holds about you, please contact our Data Protection team: